Read the docs

PrismJS

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

PrismJS records in CISA KEV

No PrismJS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Prism 5 records MEDIUM Previewers 1 record LOW

Records

5 records in Prism · all components

TI-2024-35787 CVE-2024-53382 · GHSA-x7hr-w5r2-h6wg

Code injection in PrismJS Prism

Priority MEDIUM 58

Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by atta…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00342 Published 2025-03-03 Partial fix · 1.30.0 CWE-94
TI-2021-06039 CVE-2021-23341 · GHSA-h4hr-7fg3-h35w

Regular expression denial of service (ReDoS) in prismjs

Priority LOW 39

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03167 Published 2021-02-18 Partial fix · 1.23.0 CWE-400
TI-2022-07699 CVE-2022-23647 · GHSA-3949-f494-cm99

Cross-site Scripting in Prism

Priority LOW 36

Prism is a syntax highlighting library.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01425 Published 2022-02-18 Partial fix · 1.27.0 CWE-79
Open these records in search →